Vulnerabilidades en arraytics
62 resultadosAnálisis Vexday
A Arraytics apresenta um perfil de risco moderado com 22 vulnerabilidades catalogadas, das quais apenas 1 é crítica e nenhuma está sob exploração ativa. A fraqueza dominante é autorização inadequada (CWE-862), indicando falhas no controle de acesso; embora 3 vulnerabilidades tenham sido publicadas nos últimos 90 dias, a ausência de atividade de ataque sugere que o risco imediato é contido, recomendando-se priorização das críticas e remediação das autorizações.
CVE-2026-39432HIGHWordPress Timetics plugin <= 1.0.53 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-82223MEDIUMWordPress WP Event SOlution plugin <= 4.1.22 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-84215MEDIUMWordPress Timetics plugin <= 1.0.61 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-66451MEDIUMWordPress WP Event SOlution plugin <= 4.1.9 - Broken Authentication vulnerabilityEPSS 0.3%CVE-2024-5427MEDIUMWPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reservation Form ShortcodeEPSS 0.3%CVE-2026-28173HIGHWordPress WP Event SOlution plugin <= 4.1.19 - Arbitrary Content Deletion vulnerabilityEPSS 0.3%CVE-2026-62135MEDIUMWordPress Booktics plugin <= 1.0.24 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-7813HIGHEvent Manager, Events Calendar, Booking, Registrations and Tickets – Eventin <= 4.0.37 - Unauthenticated Server-Side Request ForgeryEPSS 0.3%CVE-2026-15398MEDIUMEventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) <= 4.1.22 - Authenticated (Subscriber+) Missing Authorization to Order Completion / Free Ticket RedemptionEPSS 0.3%CVE-2026-4109MEDIUMEventin – Events Calendar, Event Booking, Ticket & Registration (AI Powered) <= 4.1.8 Missing Authorization to Authenticated (Subscriber+) Order Information ExposureEPSS 0.3%CVE-2026-57622MEDIUMWordPress WPCafe plugin <= 3.0.14 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-39585MEDIUMWordPress Booktics plugin <= 1.0.16 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-1919MEDIUMBooktics <= 1.0.16 - Missing Authorization to Get Items via REST API endpointsEPSS 0.3%CVE-2026-57674HIGHWordPress Timetics plugin <= 1.0.58 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-15402MEDIUMEventin <= 4.1.23 - Authenticated (Custom+) Stored Cross-Site Scripting via 'etn_shedule_objective' schedule_slot ParameterEPSS 0.3%CVE-2025-49321HIGHWordPress Eventin plugin <= 4.0.28 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-5919MEDIUMAppointment Booking and Scheduling Calendar Plugin – WP Timetics <= 1.0.36 - Missing Authorization to Unauthenticated Booking Details View And ModificationEPSS 0.2%CVE-2026-12956MEDIUMEventin <= 4.1.22 - Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation via 'status' ParameterEPSS 0.2%CVE-2026-11446MEDIUMBooktics – Booking Calendar for Appointments and Service Businesses <= 1.0.23 - Missing AuthorizationEPSS 0.2%CVE-2026-1920MEDIUMBooktics <= 1.0.16 - Missing Authorization to Addon Plugin InstallationEPSS 0.2%